Sr. cyber security incident responder

Primary Purpose of the JobAct as a SME subject matter expert in Cyber Security team to provide proactive support to detect, distinguish, isolate, interrupt, suppress, advanced threats that evade existing security solutions. Responsible for handling cyber security incident response activities for Qatar Energy’s IT and OT / Industrial areas on a 24/7 basis. Provide real-time hands‑on incident management support throughout all stages of the cyber security incident lifecycle. Use state‑of‑the‑art tools to analyse and investigate incidents and take immediate action or recommend a course of action to safeguard Qatar Energy.Required Experience and Skills10+ years’ experience working in a large‑scale IT environment with focus on Information Security, and knowledge of Operational Technology.6+ years previous Security Operations Centre Experience in conducting security investigations.Strong understanding of security incident management, malware management processes.Proven track record and demonstrated relevant experience as a key member of an incident response, malware analysis, or similar role.Advanced knowledge on Anti‑Malware, Vulnerability Management, Intrusion Detection/Protection, Perimeter Security, Security Incident Management, Security Information and Event Management (SIEM), Penetration Testing (application, network, host, social).Strong understanding and experience combatting crime‑ware or APT is a distinguishing factor.Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP. Demonstrated knowledge of security related technologies and their functions (IDS, IPS, FW, WAF, SIEM and the like).Educational QualificationsBachelor’s degree in information security, computer science, or systems engineering.